app[.]web-rabby[.]to

The domain app.web-rabby.to has been identified as a threat due to its involvement in brand impersonation, specifically targeting the 'across' brand. This domain masquerades as a legitimate service offering advanced crypto security and user experience, potentially deceiving users into providing sensitive information or credentials under false pretenses.

Technical analysis reveals key indicators of this threat. The domain is flagged by 14 out of 95 security vendors on VirusTotal, suggesting a significant detection rate. It is registered through the Government of the Kingdom of Tonga and resolves to the IP address 95.129.233.243, located in Russia under AS57724 with DDOS-GUARD LTD. The domain was created on August 19, 2025, and appears on one security blocklist. Furthermore, it has been blocked by PhishDestroy, highlighting its recognized risk.

The domain is currently offline, reducing immediate risk. However, users should remain vigilant and ensure they are accessing official channels for any related services. It is recommended to use comprehensive security solutions that can detect and block such threats. Organizations should monitor for similar domains and educate users on identifying signs of impersonation to prevent credential theft or other security breaches.